Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3133302e302f32332d3234203d3e203532333233.roa
File:                     3138312e31362e3133302e302f32332d3234203d3e203532333233.roa (raw, json)
Hash identifier:          PYpzetpeqgZqnie7q8s77qlA5LJ+W7cmkc8GpKFipDM=
Subject key identifier:   AF:8D:D1:0D:9D:7E:86:BB:A4:E7:CD:68:D0:C2:ED:FE:79:08:A7:EB
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       3C4279B39E32F667AE5E08C7E00F96C9A37394BD
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3133302e302f32332d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:36 +0000
ROA not before:           Tue 04 Feb 2025 18:32:36 +0000
ROA not after:            Tue 03 Feb 2026 18:37:36 +0000
asID:                     52323
IP address blocks:        181.16.130.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:42:79:b3:9e:32:f6:67:ae:5e:08:c7:e0:0f:96:c9:a3:73:94:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:36 2025 GMT
            Not After : Feb  3 18:37:36 2026 GMT
        Subject: CN=AF8DD10D9D7E86BBA4E7CD68D0C2EDFE7908A7EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f6:f0:1e:6e:1c:81:3f:42:46:09:86:85:a9:
                    c6:af:06:f6:be:49:7c:8e:92:bc:8b:ce:e4:fd:81:
                    db:b6:03:51:bf:71:dc:32:5a:07:96:08:56:79:06:
                    56:5d:6b:c4:a0:25:e5:72:a6:5c:8d:f4:e2:a8:83:
                    f6:9d:67:2d:b3:1c:51:86:5d:66:8b:57:85:09:e2:
                    d6:06:36:db:0b:5d:b6:41:a1:d8:fd:be:fc:a3:3c:
                    b8:f8:1c:09:78:3d:34:60:e4:51:08:39:ae:49:a8:
                    14:da:fe:6d:3e:3d:73:de:7b:a6:d2:cf:fa:02:3e:
                    51:68:5b:f9:6c:9e:49:12:db:9f:47:5b:6d:ca:87:
                    f4:e7:fc:4f:85:b9:18:75:82:41:04:99:49:7c:08:
                    cb:25:f6:a7:c7:c2:71:0a:11:4e:94:0e:06:f8:85:
                    8f:ca:31:70:5a:f5:07:89:94:3a:02:7a:5a:5c:a4:
                    9c:4d:33:5e:c4:38:65:b6:a7:31:ea:9f:f9:6f:09:
                    54:d5:a4:8c:c6:87:e4:02:85:7b:0a:62:a2:ba:a3:
                    28:39:63:9c:6e:84:30:e5:fa:04:b5:3a:0a:5a:a3:
                    3a:0b:8f:79:9f:65:f1:6b:55:27:62:9c:73:d8:a2:
                    55:40:de:e5:eb:27:18:87:7c:27:b3:95:9d:ca:d9:
                    c5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8D:D1:0D:9D:7E:86:BB:A4:E7:CD:68:D0:C2:ED:FE:79:08:A7:EB
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3133302e302f32332d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:30:be:f8:fc:5a:d4:48:45:77:ab:fe:b4:7f:e2:5b:48:77:
         36:6d:ff:84:82:b1:d9:98:23:d2:14:3c:75:78:82:ba:bd:76:
         b0:ab:39:4f:19:16:8e:9b:e5:b7:5a:33:78:3a:b8:32:00:c0:
         a6:8a:93:a6:37:ff:a4:42:13:b2:5d:3d:ac:41:63:ad:09:83:
         18:11:f0:eb:18:f1:03:12:af:d7:43:5a:ef:b3:91:f9:3d:da:
         fc:b3:9d:0c:fe:41:15:2e:a3:48:d4:55:77:4b:51:e0:0f:83:
         b4:9c:78:d0:22:42:5b:8a:fc:44:ff:91:89:a0:50:2d:66:d9:
         0e:88:32:89:af:41:b8:27:6d:72:d9:55:ff:bb:87:e3:a4:15:
         1e:d6:4d:72:96:d2:88:87:4d:dc:7c:c1:5a:bc:c7:26:e4:6e:
         07:4e:dc:73:6f:51:fc:1e:2f:a7:b2:7a:9d:8c:31:fc:dd:e8:
         7d:67:14:5e:df:93:3f:3d:33:39:64:ca:e2:d8:95:7d:d4:9a:
         f6:ed:3c:44:50:7f:dd:c4:c8:44:94:ab:5e:11:44:a9:08:e4:
         49:f4:b3:a9:f8:4e:61:09:de:9a:88:46:b0:52:91:e0:22:8d:
         e5:8d:60:a2:62:f5:c4:50:e7:71:43:09:d3:91:a1:b2:7b:8d:
         5e:4d:c7:83
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPEJ5s54y9meuXgjH4A+WyaNzlL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU2QjVGNTZCRkJFNjlGNzRDRTdCMDEzM0VCRTkxODgw
MEQ1NTY2MjAeFw0yNTAyMDQxODMyMzZaFw0yNjAyMDMxODM3MzZaMDMxMTAvBgNV
BAMTKEFGOEREMTBEOUQ3RTg2QkJBNEU3Q0Q2OEQwQzJFREZFNzkwOEE3RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb9vAebhyBP0JGCYaFqcavBva+
SXyOkryLzuT9gdu2A1G/cdwyWgeWCFZ5BlZda8SgJeVyplyN9OKog/adZy2zHFGG
XWaLV4UJ4tYGNtsLXbZBodj9vvyjPLj4HAl4PTRg5FEIOa5JqBTa/m0+PXPee6bS
z/oCPlFoW/lsnkkS259HW23Kh/Tn/E+FuRh1gkEEmUl8CMsl9qfHwnEKEU6UDgb4
hY/KMXBa9QeJlDoCelpcpJxNM17EOGW2pzHqn/lvCVTVpIzGh+QChXsKYqK6oyg5
Y5xuhDDl+gS1OgpaozoLj3mfZfFrVSdinHPYolVA3uXrJxiHfCezlZ3K2cVTAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUr43RDZ1+hruk581o0MLt/nkIp+swHwYDVR0j
BBgwFoAUjmtfVr++afdM57ATPr6RiADVVmIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjEyNDk0QUE0QTM5NENDRTg3MEZGQkNBQjdEQ0VBNTg0
NEJBRjUxQzI3MzE2QzQ1MjkyQjM5NTg0OUUwQkNDLzAvOEU2QjVGNTZCRkJFNjlG
NzRDRTdCMDEzM0VCRTkxODgwMEQ1NTY2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTZCNUY1NkJGQkU2OUY3NENF
N0IwMTMzRUJFOTE4ODAwRDU1NjYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTYxMjQ5NEFBNEEzOTRDQ0U4NzBGRkJDQUI3RENFQTU4NDRCQUY1MUMy
NzMxNkM0NTI5MkIzOTU4NDlFMEJDQy8wLzMxMzgzMTJlMzEzNjJlMzEzMzMwMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbUQgjAN
BgkqhkiG9w0BAQsFAAOCAQEAEDC++Pxa1EhFd6v+tH/iW0h3Nm3/hIKx2Zgj0hQ8
dXiCur12sKs5TxkWjpvlt1ozeDq4MgDApoqTpjf/pEITsl09rEFjrQmDGBHw6xjx
AxKv10Na77OR+T3a/LOdDP5BFS6jSNRVd0tR4A+DtJx40CJCW4r8RP+RiaBQLWbZ
Dogyia9BuCdtctlV/7uH46QVHtZNcpbSiIdN3HzBWrzHJuRuB07cc29R/B4vp7J6
nYwx/N3ofWcUXt+TPz0zOWTK4tiVfdSa9u08RFB/3cTIRJSrXhFEqQjkSfSzqfhO
YQnemohGsFKR4CKN5Y1gomL1xFDncUMJ05GhsnuNXk3Hgw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:09:28 2025 by rpki-client